Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json)
Hash identifier: 8AcDmb4LQp8mXFudZ7lI+T0EwqnKlmNqmIQgImmqZD0=
Subject key identifier: 2D:A1:F2:02:46:58:2D:AA:95:DE:85:26:46:DC:30:C5:4E:02:AB:0C
Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511
Certificate serial: 01A0C96AD533609B68DD2F7487AB4E206D75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
Manifest number: 10F6
Signing time: Tue 22 Sep 2026 14:00:16 +0000
Manifest this update: Tue 22 Sep 2026 14:00:16 +0000
Manifest next update: Wed 23 Sep 2026 14:00:16 +0000
Files and hashes: 1: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: 6xl4WeANpxLVq7RHL0Waw3mVudmJ8tN6p+hw1OFM9IU=)
2: FYB-i5p41w3YJpC3Dj1Qpfp1quc.roa (hash: 0UT4BMzVy0MhF6zVNibE40BOm7AXKt6Q7+fr4Nz5duo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6a:d5:33:60:9b:68:dd:2f:74:87:ab:4e:20:6d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511
Validity
Not Before: Sep 22 14:00:16 2026 GMT
Not After : Sep 23 14:00:16 2026 GMT
Subject: CN=2da1f20246582daa95de852646dc30c54e02ab0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:19:d1:4d:e2:c5:38:01:c5:0c:ea:9e:dd:
f2:ba:4c:80:a3:9b:0e:84:d8:53:e0:79:78:5e:74:
de:0c:8e:cc:e6:d2:2f:7b:2e:01:f5:c1:30:12:62:
a5:c8:f9:4a:50:8f:f0:c5:ff:b7:86:91:82:a4:57:
a2:49:1d:f8:87:f0:01:c1:1b:2f:cc:28:f8:c0:ad:
f0:0c:af:3c:c1:9d:45:0a:91:87:6e:f7:03:f3:49:
bc:7c:1d:45:b1:3d:2c:e8:13:85:03:75:d7:a2:e6:
18:aa:9e:59:4e:1d:a6:68:b6:71:5e:b3:80:ad:75:
fe:7a:f7:c2:59:46:e7:a1:29:d4:7c:78:07:4e:4a:
86:4b:b8:28:0c:94:c2:ee:b2:83:8c:e1:78:b5:ee:
52:3e:bf:41:9e:07:84:27:fd:6d:79:64:ea:45:c3:
19:19:42:bf:dd:d3:06:4d:64:6b:84:37:55:c1:c0:
59:2f:5c:27:7d:c1:d3:36:56:0e:bf:88:88:84:d9:
3e:33:29:54:6a:41:a4:97:55:b8:15:6e:fa:8d:eb:
bb:44:8b:db:a4:d1:ff:08:66:43:a7:f5:d0:18:77:
ff:d2:4b:a4:03:a1:76:2a:8a:9b:ce:90:4e:48:b6:
a1:60:c2:46:b3:bf:e2:49:85:a8:15:08:c1:65:5b:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A1:F2:02:46:58:2D:AA:95:DE:85:26:46:DC:30:C5:4E:02:AB:0C
X509v3 Authority Key Identifier:
keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e9:68:7b:60:2d:05:e3:2e:5a:18:40:b9:fc:86:8b:cb:96:
06:a7:ea:e0:ea:b1:8c:17:fa:b4:e0:a0:bd:01:1d:68:1d:da:
8e:f4:ac:10:51:b1:b1:f8:64:2e:b8:06:26:8d:f1:0d:41:19:
90:c0:c1:48:2e:44:d4:fd:cc:20:86:e1:0e:d6:df:81:9f:70:
17:7e:6a:fb:3e:7a:be:73:30:32:ab:91:cd:d6:33:fd:6e:74:
59:be:2c:cc:4a:c9:a2:c6:bd:a2:1f:98:16:d3:d5:c3:ae:6f:
7f:45:26:c6:b5:6a:3a:cf:74:73:35:c6:e3:d6:a7:c4:30:79:
f8:77:98:a0:35:f7:c2:21:d2:4b:ae:d1:24:d2:c3:83:2d:bd:
99:02:c4:99:b1:e9:d0:74:7b:63:4a:1d:73:1b:5a:92:01:27:
25:79:25:95:0d:33:ae:b7:9d:a7:19:d4:68:e5:fa:3b:56:23:
0c:58:64:93:d2:2f:95:14:c6:d1:70:e7:0a:bf:89:b3:67:7b:
48:34:c1:80:6c:be:0e:78:ec:5d:6a:15:01:9d:12:07:fc:bd:
f6:c6:46:6c:d8:37:db:d1:fd:d6:85:c4:dc:2e:b0:13:e8:71:
8d:73:97:14:51:82:ec:8f:8f:a9:d9:ec:85:7a:5b:60:9a:67:
92:7f:72:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJatUzYJto3S90h6tOIG11MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MWQ0MmFhZTAxOWU0ZWE0NGE2MTYzNzhlYjY2YjM4OWRl
OGM1MTEwHhcNMjYwOTIyMTQwMDE2WhcNMjYwOTIzMTQwMDE2WjAzMTEwLwYDVQQD
EygyZGExZjIwMjQ2NTgyZGFhOTVkZTg1MjY0NmRjMzBjNTRlMDJhYjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzcZ0U3ixTgBxQzqnt3yukyAo5sO
hNhT4Hl4XnTeDI7M5tIvey4B9cEwEmKlyPlKUI/wxf+3hpGCpFeiSR34h/ABwRsv
zCj4wK3wDK88wZ1FCpGHbvcD80m8fB1FsT0s6BOFA3XXouYYqp5ZTh2maLZxXrOA
rXX+evfCWUbnoSnUfHgHTkqGS7goDJTC7rKDjOF4te5SPr9BngeEJ/1teWTqRcMZ
GUK/3dMGTWRrhDdVwcBZL1wnfcHTNlYOv4iIhNk+MylUakGkl1W4FW76jeu7RIvb
pNH/CGZDp/XQGHf/0kukA6F2KoqbzpBOSLahYMJGs7/iSYWoFQjBZVvTfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2h8gJGWC2qld6FJkbcMMVOAqsMMB8GA1UdIwQY
MBaAFNgdQqrgGeTqRKYWN462azid6MURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xYzdjMDktZTAyYy00Y2JmLTllNjct
OTY4NTU1NTE5MGM0LzEvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8xYzdjMDktZTAyYy00Y2JmLTllNjctOTY4NTU1NTE5MGM0
LzEvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOloe2At
BeMuWhhAufyGi8uWBqfq4OqxjBf6tOCgvQEdaB3ajvSsEFGxsfhkLrgGJo3xDUEZ
kMDBSC5E1P3MIIbhDtbfgZ9wF35q+z56vnMwMquRzdYz/W50Wb4szErJosa9oh+Y
FtPVw65vf0UmxrVqOs90czXG49anxDB5+HeYoDX3wiHSS67RJNLDgy29mQLEmbHp
0HR7Y0odcxtakgEnJXkllQ0zrredpxnUaOX6O1YjDFhkk9IvlRTG0XDnCr+Js2d7
SDTBgGy+DnjsXWoVAZ0SB/y99sZGbNg329H91oXE3C6wE+hxjXOXFFGC7I+Pqdns
hXpbYJpnkn9yvA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:10:07 2026 by rpki-client